Search

Expected end of text, found ',' (at char 21), (line:1, col:22)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (405403 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-89204 1 Siemens 1 Ruggedcom Crossbow 2026-10-13 5.4 Medium
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation.
CVE-2026-89205 1 Siemens 1 Ruggedcom Crossbow 2026-10-13 6.3 Medium
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.
CVE-2026-109783 2026-10-13 N/A
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5.
CVE-2026-109782 2026-10-13 N/A
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5.
CVE-2026-109781 2026-10-13 N/A
Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
CVE-2026-109780 2026-10-13 N/A
Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158.
CVE-2026-109779 2026-10-13 N/A
Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158.
CVE-2026-109778 2026-10-13 N/A
Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
CVE-2026-109777 2026-10-13 N/A
Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
CVE-2026-109776 2026-10-13 N/A
Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
CVE-2026-109775 2026-10-13 N/A
Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
CVE-2026-109774 2026-10-13 N/A
Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158.
CVE-2026-109773 2026-10-13 N/A
Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158.
CVE-2026-109772 2026-10-13 N/A
Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158.
CVE-2026-109771 2026-10-13 N/A
Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158.
CVE-2026-109770 2026-10-13 N/A
Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
CVE-2026-109769 2026-10-13 N/A
Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158.
CVE-2026-109768 2026-10-13 N/A
Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158.
CVE-2026-109767 2026-10-13 N/A
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
CVE-2026-109766 2026-10-13 N/A
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.